This is some really weird stuff. The same thing happens to my cable modem, though it's through HTTPS and a password that changes daily (but for which a generator exists online.)

http://thenubbyadmin.com/2014/04/28/a-tale-of-centurylink-backdoors-pci-compliance-and-pain-lots-of-pain/